What we claims: 



1 



1 . 



A storage subsystem which is connected to a host 



2 computer through a communication line, comprisin 



g 



3 



an interface which is used for connecting 



to said 



4 



communication line, wherein, 



5 



said interface comprises a first filter which 



j udges , 



6 on the occasion of having received communication packets 

7 from said communication line, whether there is a 

8 communication packet with a predetermined format for use 

9 in an access to said storage subsystem, among the 
10 communication packets. 

1 2. The storage subsystem according to Claim 1, 

2 wherein, 

3 said interface further comprises a second filter which 

4 receives the communication packet judged tobe for saidaccess 

5 in said fist filter, and judges whether it is a communication 

6 packet permitted to access to a storage area in said storage 

7 subsystem and transmitted from said host computer or not. 

1 3. The storage subsystem according to Claim 2, 

2 wherein, 

3 in case that said host computer is permitted to access 

4 to said storage subsystem, said interface further comprises 

5 an access permission table having information which uniquely 
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6 specifies the host computer, and information which specifies 

7 a storage area in said storage subsystem to which the host 

8 computer is permitted to access, and 

9 said second filter judges whether a communication 

10 packet judged to be for use in said access is transmitted 

11 from the host computer permitted to access or not, in 

12 accordance with information stored in said access permission 

13 table. 

1 4. The storage subsystem according to Claim 1, 

2 wherein, 

3 said interface further comprises 

4 a traffic measuring and judging unit which measures 

5 traffic of all communication packets received in the 

6 interface, and traffic of a communication packet judged not 

7 to be the packet with said format in said first filter, 

8 respectively, and by using the both traffics , j udges whether 

9 a communication failure is generated or not, and 

10 a communication failure alerting unit which alerts a 

11 management server connected to said storage subsystem and 

12 comprises a function of displaying information alerted, in 

13 case that it is judged that a communication failure is 

14 generated in said traffic measuring and judging unit. 

1 5. The storage subsystem according to Claim 4, 

2 wherein, 
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said traffic measuring and judging unit further 
measures traffic of a communication packet judged not to 
be the communication packet transmitted from said host 
computer which is permitted to access in said second filter, 
and by using the traffic and said traffic of all communication 
packets, further judges whether a communication failure is 
generated or not. 

6. The storage subsystem according to Claim 5, 
wherein, 

said interface further comprises 

a traffic logre cording unit which records, asatraffic 
log, communication information of a communication packet 
judged not to be the communication packet with said format 
in said first filter and a communication packet judged not 
to be the communication packet transmitted from said host 
computer permitted to access in the second filter. 

7 • A management server connected to the storage 
subsystem according to Claim 6, wherein, 

an improper communication source analyzing unit which 
refers to said traffic log, in case that it is alerted from 
a communication failure alerting unit of said storage 
subsystem that a communication failure is generated, and 
searches a source of said communication packet causes the 
communication f ai lure . 



1 8, The management server according to Claim 7 , further 

2 comprising, 

3 a relay device control unit which controls, based on 

4 information of a source searched in said improper 

5 communication source analyzing unit, a relay device which 

6 relays communication to said storage subsystem disposed on 

7 said communication line so as to cut off communication from 

8 the source. 

1 9. A program in a computer mounted on a storage 

2 subsystem connected to a host computer through a 

3 communication line, functioned as 

4 interface means which connects to said communication 

5 line, and 

6 first filtering means which judges, on the occasion 

7 of having received communication packets from said 

8 communication line through said interface means, whether 

9 there is a communication packet with a predetermined format 

10 for use in an access to said storage subsystem, among the 

11 communication packets. 

1 10. Aprogram according to claim 9 , further functioned 

2 as 

3 second filtering means which receives the 

4 communication packet judged to be for said access in said 

5 fist f ilteringmeans, and judges whether it is a communication 
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6 packet permitted to access to a storage area in said storage 

7 subsystem and transmitted from said host computer or not. 

1 11. Aprogram according to claim 9, further functioned 

2 as 

3 communication failure judging means which measures 

4 traffic of all communication packets received in said 

5 interface means, and traffic of a communication packet judged 

6 not to be the packet with said format in said first filter, 

7 respectively, and by using the both traffics , judges whether 

8 a communication failure is generated or not, and 

9 a communication failure alerting means which alerts 

10 a management server connected to said storage subsystem and 

11 comprises a function of displaying information alerted, in 

12 case that it is judged that a communication failure is 

13 generated in said communication failure judging means. 

1 12. A program in a computer mounted on a management 

2 server which is connected to a storage subsystem, functioned 

3 as 

4 source searching means which refers to said traffic 

5 log, in case that it is alerted from a communication failure 

6 alerting unit of said storage subsystem that a communication 

7 failure is generated, and searches a source of said 

8 communication packet which causes the communication failure . 
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13. A program which has a computer, mounted on a 
management server which is connected to a storage subsystem, 
functioned as 

source searching means which refers to said traffic 
log, in case that it was alerted from a communication failure 
alerting unit of said storage subsystem that a communication 
failure is generated, and searches a source of said 
communication packet which causes the communication failure, 
and 

relay device control means which controls, based on 
information of a source searched in said source searching 
means, a relay device which relays communication to said 
storage subsystem disposed on said communication line for 
receiving a communication packet so as to cut off 
communication from the source. 

14 . A computer-readable recording medium in which the 
program according to Claim 9 is recorded. 

15. A storage system in which a storage subsystem, 
a host computer, and a management server are connected by 
a communication line, wherein, 

said storage subsystem comprises an interface which 
connects to said communication line, and 

said interface comprises, 

a first filter which judges, on the occasion of having 



received communication packets from said communication line , 
whether there is a communication packet with a predetermined 
format for use in an access to said storage subsystem, among 
the communication packets, 

a second filter which receives the communication packet 
judged to be for said access in said fist filter, and judges 
whether it is a communication packet permitted to access 
to a storage area in said storage subsystem and transmitted 
from said host computer or not, 

a traffic measuring and judging unit which measures 
traffic of all communication packets received in the 
interface, and traffic of a communication packet judged not 
to be the packet with said format, respectively, and by using 
the both traffics, judges whether a communication failure 
is generated or not, 

a communication failure alerting unit which alerts said 
management server, in case that it is judged that a 
communication failure is generated in said traffic measuring 
and judging unit, and 

a traffic log recording unit which records, as a traffic 
log, communication information of a communication packet 
judged not to be the communication packet with said format 
in said first filter and a communication packet judged not 
to be the communication packet transmitted from said host 
computer permitted to access in the second filter, and 

said management server comprises 
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34 a display device which displays the alert received from 

35 said communication failure alerting unit, 

36 an improper communication source analyzing unit which 

37 refers to said traffic log, in case that it is alerted from 

38 a communication failure alerting unit of said storage 

39 subsystem that a communication failure is generated, and 

40 searches a source of said communication packet which causes 

41 the communication failure, 

42 a relay device control unit which controls, based on 

43 information of a source searched in said improper 

44 communication source analyzing unit, a relay device which 

45 relays communication to said storage subsystem disposed, on 

46 said communication line so as to cut off communication from 

47 the source. 

1 16. The storage system according to Claim 1 5, wherein, 

2 in case that said host computer is permitted to access 

3 to said storage subsystem, said interface further comprises 

4 an access permission table having information which uniquely 

5 specifies the host computer, and information which specifies 

6 a storage area in said storage subsystem to which the host 

7 computer is permitted to access, and 

8 said second filter judges whether a communication 

9 packet judged to be for use in said access, is transmitted 

10 from the host computer permitted to access or not, in 

11 accordance with information stored in said access permission 
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12 



table . 



1 17 . The storage system according to Claim 15, wherein, 

2 said traffic measuring and judging unit further 

3 measures traffic of a communication packet judged not to 

4 be the communication packet transmitted from said host 

5 computer permitted to access in said second filter, and by 

6 using the traffic and said traffic of all communication 

7 packets, further judges whether a communication failure is 

8 generated or not. 

1 18. The storage system according to Claim 17, wherein, 

2 said traffic measuring and judging unit further 

3 measures traffic of a communication packet judged to be the 

4 communication packet transmitted from said host computer 

5 permitted to access in said second filter, and by using the 

6 traffic and said traffic of all communication packets, judges 

7 whether a value of a ratio of traffic of a communication 

8 packet transmitted from said host computer permitted to 

9 access to traffic of all communication packets is less than 

10 a predetermined value or not, and 

11 said communication failure alerting unit alerts said 

12 management server of the alert which indicates that second 

13 communication failure is generated, in case that it is judged 

14 that the value of the ratio is less than the predetermined 

15 value in the traffic measuring and judging unit, and 



46 



16 said management server further comprises 

17 a QoS condition designating unit which, in case of 

18 having received the alert which indicates that the second 

19 communication failure is generated from said communication 

20 failure alerting unit, readjusts a network QoS between said 

21 storage subsystem and said host computer, which has been 

22 set up in advance by an administrator. 

1 19 . A communication control method in a storage system 

2 in which a storage subsystem, a host computer , and a management 

3 server are connected by a communication line, comprising 

4 the steps of: 

5 judging, when communication packets from said 

6 communication line were received in said storage subsystem, 

7 whether there is a communication packet with a predetermined 

8 format for use in an access to said storage subsystem, among 

9 the communication packets, 

10 measuring traffic of all communication packets 

11 received by said storage subsystem, and traffic of a 

12 communication packet judged not to be the packet with said 

13 predetermined format, respectively, and recording a traffic 

14 log of a communication packet judged not to be the 

15 communication packet with said format, 

16 judging, by using said measured bo th traf fics , whether 

17 a communication failure is generated or not, and alerting 

18 said management server, in case that it is judged that a 
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communication failure is generated, 

referring to said traffic log, in case that the alert 
that the communication failure is generated is received in 
said management server from said storage subsystem, and 
searching information of a source of said communication 
packet which causes said communication failure, and 

controlling, based on information of the searched 
source, a relay device which relays communication to said 
storage subsystem disposed on said communication line so 
as to cut off communication from the source. 

20. A storage system having a storage subsystem 
connected to a host computer through a communication line, 
and a management server connected to said storage subsystem, 
wherein, 

said storage subsystem comprises 

an interface which connects to said communication line 
and a maintenance terminal which maintains said storage 
subsystem, and 

said interface comprises 

a first filter which judges, on the occasion of having 
received communication packet s from said communication line, 
whether there is a communication packet with a predetermined 
format for use in an access to said storage subsystem, among 
the communication packets, 

a second filter which receives the communication packet 
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judged to be for said access in said fist filter, and judges 
whether it is a communication packet permitted to access 
to a storage area in said storage subsystem and transmitted 
from said host computer or not 

a traffic measuring and judging unit which measures 
traffic of all communication packets received in the 
interface, and traffic of a communication packet judged not 
to be said communication packet permitted to access in said 
second filter, respectively, and calculates a value of a 
ratio of the both traffics (communication ratio) , and by 
using the both traffics, judges whether a communication 
failure is generated or not, and 

a communication failure alerting unit which alerts said 
maintenance terminal, in case that it is judged that a 
communication failure is generated in said traffic measuring 
and judging unit, of that failure is generated and said 
communication ratio, and 

said maintenance terminal comprises 

a warning message reporting unit which generates, in 
case that the alert of that a communication failure is 
generated and said communication ratio is received from said 
communication information and failure alerting unit, a 
warning message in accordance with said alert, and outputs 
it to said management server, and 

said management server comprises: 

an output device, 



42 a failure information displaying unit which comprises 

43 said output device displayed the warning message and said 

44 communication ratio received from said warning message 

45 reporting unit, and 

46 a QoS condition designating unit which judges whether 

47 said communication ratio is within a predetermined 

48 permissible zone, and in case that it is judged to be outside 

49 the permissible zone, adjusts a network QoS of a relay device 

50 which relays communication to said storage subsystem 

51 disposed on said communication line. 
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